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“The Purpose of Computing is Insight, not Numbers.” ? 


Another Purpose of Computing is to Robustly Perform Tasks. 


‘Richard Hamming. Numerical Methods for Scientists. and: Engineers= 1962. 
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Origin of this Paper: HICSS-56 


e HICSS-56 paper “Dynamical Systems that Heal” asked: How can 
self-repair be designed to adequately function while actively being 
attacked by a sentient adversary? 


e HICSS-56 peer reviewer 2 stated: The paper does not seem to cover 
the case of malicious modification to the ability of an algorithm to 
detect changes to the code in the first place. 


e HICSS-56 peer reviewer 3 stated: The novel aspects of the article 
are focused on self-modifiability for a system of differential equations 
where the ‘damage’ done to the system may be the results of other 
action like white noise where systems are perturbed slightly. 


e Stumbled on “Flip-Flop Gate Model for EEMI Injection.” 2 


*Valbuena, L., et al. (2019) “Simplified Flip-Flip Gate Model for EEMI 
Injection.” Intl. Conf. Electromagnetics in Adv. Appl. 845-850. 
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Some Electronic Attacks 


e Attack on insulin injector sabotages flow of insulin.? 
e Pacemaker attacks produce dangerous shock commands.* 
e Injecting clock glitches skips cryptographic instructions.° 


e Out-of-band signal attacks alter sensor measurements.® 


3LiC., et. al. (2011) “Hijacking an insulin pump: Security attacks and 
defenses for a diabetes therapy system.” /EEE Intl. Conf. on e-Health. 

‘Halperin D., et. al. (2008) “Pacemakers and implantable cardiac 
defibrillators: Software radio attacks and zero-power defenses.” /EEE 
Symposium on Security and Privacy . 

’Korak T., Hoefler M. (2014) “On the effects of clock and power supply 
tampering on two microcontroller platforms.” FDTC. 8-17, Sept. 2014. 

®Giechaskiel I., et. al. (2019) “Taxonomy and challenges of out-of band 
signal injection attacks and defenses.” nttps://arxiv.org/pdf /1901206935 . pdf. 


Stabilizing D Flip-flops with Self-Modifiable Differential Equations Michael Stephen Fiske HICSS-57 


Introduction ) f | c 1 1 
fet Tele} 


D Flip-flop 
D flip-flops are commonly used in digital electronics. 
Flip-flop circuits have two stable physical states. 


D(t) 


= 
[> 1-- 


CLK is clock input. D(t) is data input. Q(t) is output (0 or 1). 


Time CLK D(t) Q(t+1) Q(t+1) 
t Rising Edge 0 0 1 
t Rising Edge 1 1 0 
t Non-Rising {0,1} Q(t) 1-— Q(t) 
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Research Overview 


e Start with a differential equations model of a D flip-flop.’ 


Self-modifiable differential equations help stabilize a D 
flip-flop during a noise attack. 


e A software simulation is provided. No hardware design yet. 


Meta variables can help detect a manipulated flip-flop orbit. 


Meta variables and operators can heal a flip-flop orbit 
disrupted by noise. 


"Valbuena L., et al. (2019) “Simplified Flip-Flop Gate Model for EEMI 
Injection.” Intl. Conf. on Electromagnetics in Adv. Appl.. 845-850. 
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Related Work 


e LSI Logic scientists created a flip-flop model based on CMOS 
ASIC technology, using an experimental test circuit.® 


e Valbuena’s flip-flop differential equations model is derived 
from [8]. 


e Soft error code correction? in flip-flops addresses errors due to 
radiation from cosmic rays and packaging material. Active 


electromagnetic attacks by Mallory are not addressed. 


e In 2023, introduced self-modifiable differential equations. 1° 


8Horstmann J.U., et al. (1989) “Metastability behavior of cmos asic 
flip-flops in theory and test”. /EEE J. Solid Circuits. 24(1) 146-157. 

°Mitra S., et al. (2007) “Soft Error Resilient System Design through Error 
Correction.” Intl. Federation for Info. Processing. 249, 143-156. 

10Fiske M.S. (2023) “Dynamical Systems that Heal” = HICSS-56, 6685-6694. 
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D Flip-flop Differential Equations Model 


D flip-flop orbit u(t) =(u(t),w(t)). G=(4,%)= 


ic) Ga, 2°) dacs Gaetan Go — sin Alu) (6 w. 


sina(u) — cosa(u) sinB(u) cos B(u) 


. du 
Vector Field ns 
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D Flip-flop Differential Equations: L,(u). a(u), 3(u) 


p=(p1,P2), u=(u1, U2). ||p— ull? = (pr — 41)? + (p2 — w)?. 
Symmetric function Lp(u) = ——4o9 ____ ¢=0.8, d=1, ly =2. 


Tpeclip—ull2—d° 
Build a(u) and B(u): Z(p,u) = atan2(p2 — ue, pi — ur). 
Fixed points A = (a1, a2) and B = (hy, bo). 
ép(u) = —5 tanh(up). 
ba(u) = atan2 (sin y(u), cos y(u)), where y(u) = 7 — dp(u). 


Define ga(u) = 5 + 5 tanh(u; — Kaz), where « = 1. 
Define gg(u) = 5 — 3 tanh(u1 — Kb1) 

Define a(u) = 5 ga(u) (¢a(u) — Z(A, u)). 

Define @(u) = 4% ge(u) (¢e(u) — Z(B,u)). 
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Adding Input 
Input pulses store (toggle) the data input in the D flip-flop. 


du are Gee =) eae a pa (ici) 


sina(u)  cosa(u) sinB(u) cos B(u) 
Ky 
+() 20) 
c=0.8, d=1, lo = 2, k =3. Fixed points a=(1,—-1), b=(-1,1). 
K, = 0.6, Ko = —-1.5. 
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Toggling the Flip-Flop State 


-15 -1.0 -0.5 0.0 


10 u(16) 10) 10} u(4L.8) 
0.5) 05 05 
a 0.0; 0.0 
-0.5 -0.5) -0, 
u(17.8) (20) 
aie u(178) a 


“15-10-05 00 05 10 


Ky 
(2)z0 models data input D(t) and clock input CLK. 


Q(t)=0. Q(t)=1. 6 b=(-1,1). 


T(t) 0 | | 


Z(16)=1< row2. Q(t+1):=1 
Q(it+H=1. Q(t4+1)=0. 6 a=(1,-1). 


-15 -10 -05 0.0 05 10 


-1.0 


u(45) 
u(41.8) 


-15 -10 -05 00 05 10 


Z(t) =0 row 3 of Table 1. 
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Noise Disrupts Flip-Flop Toggling 


Add noise term +(f) n(t) to the model. K3 =0. Ky, = 1. 


n(t) 
x 
0 
0 8 16 24 32 
t 
15 1.5| 
16 24 

- u(16) i u(24) 
0.5 0.5; 
at u(17.8) me u(17.8) 


-1.5 -1.0 -0.5 -1.5 -1.0 -0.5 
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Alice’s Goal & Our Approach 


Alice’s goal: Hinder Mallory from sabotaging her flip-flop. 
Our approach is partially motivated by information theory. 
Analogous to error-correction bits!! add new variables. 


Only mathematical / software methods are explored. 
Hardware implementations are not described. 


Use self-modifiable differential equations to ameliorate noise. 


“Hamming R.W. (1950) “Error Detecting and Error Correcting Codes.” Bell 
Technical J. 29(2), 147-160. 
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Principle of Self-Modifiability in Dynamical Systems 
Differential equations are a dynamical system on a manifold.!* 


A set of rules governs a dynamical system: 
In a computer program, each instruction is a rule. 


In a system of differential equations, each equation is a rule. 


A. self-modifiable dynamical system changes its own rules: 


add new rules to itself; replace rules with new rules; or delete rules. 


2C is a 2-D manifold. The unit circle S? is a 1-D manifold. Both the torus 
S' x S! and sphere S? are 2-D manifolds. 
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Meta Variables & Meta Operators 


A meta operator specifies how to self-modify an equation. 
A meta operator requires a specific time to execute. 
A meta variable w helps detect an event. 


A function f(t,w, %) is integrated with respect to time. 


ce eee Time so = inf {7 >0: if 4 


a 
dt dt dt abl en 


A detectable event: integral first goes beyond threshold 62. 


A meta operator corresponding to w executes at time so. 
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Alice Adds Healing Variables 


Alice adds healing variables u3, ug. Uy, U2 are signal variables. 


Set 1(t) = (ui(t), ue(t)) and v2(t) = (us(t), ua(t)). For i = 1,2: 


= tle) (Sa) conaney ee) + (Kis) 200 
te) (Sebo) emer).) 0) + (ie) mle 


Boundary conditions u;(0) = u3(0) and u2(0) = u4(0). 
Input constants Ky, = Ko; = 0.6, and Ky,2 = Ko 2 = —-1.5. 


Noise constants K;,3 = 0, and K1,4 = 1: noise only disrupts signal 
variable U2. Meta operator 2 assumes there is no noise injection on 
variables u3, and ug, so K2,3 = Ko4 = 0. 
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Meta Operator 2 Heals Noise Attack 
No Healing. Toggle Fails. 


| 
u(24) 
1.0 
od u(17.8) 
=15 -10 -05— 
Uy 
Meta Operator 2, 92 — dus _ dw 44(0) = 0. 62 = 0.2 
* “dt dt dt* “2 » (72 ae 
th _ dug 
If lwo (t)| > 02, set G2 = Se. 
1.0 
: 0.5 
2 U2 0.0 
n(t) oa 
u(24) 
5 -10 u(17.8) 
0 8 16 24 32 -17 -10 oO 10 
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Mallory Attacks Healing Variable: Meta Operator 2 Fails 


N2(t) attacks signal variable ua. 73(t) attacks healing variable ug. 


1.5 
u(24) 
3 1.0 
U2 
2 
a(t) - 
1 1 
no(t) 0.0 
— 0 u(17.8) 
8 16 24 8 16 24 -1.70 -1.00 —0.25 
t t Uy 


ni(t) = x(t, 3, 5, 67,5, 3), where 62 = § and 63 = 1. 


x(t, 1, f,6,k,A) = Ax g(t, 1,6, k) * A(t, |, f). 
g(t, /,6,k) = tanh(k(t — /)) + tanh(—k(t —/+4+4)). 
A(t, 1, f) = sin (2x f(t — 1). 
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Decentralize Roles of Signal & Healing Variables 


Healing variable is a single point of failure of meta operator 2. 
Use six variables u,,..., Ug. Decentralize roles of variables u;. 


Meta Equations: w1(0) = w2(0) = w3(0) = 0. 
dw, dug dup dw dug dug dw3 du = dug 


dt dt dt’ dt dt dt’ dt dt dt 


Meta Operator 5: 


duo 1 dug dug 
if lan(si)| 24 and |ws(ss)| 20 set — 5 ( de dé ) 
dug = 1 dug dug 
if |uu(si)| > and |w2(s)| > set dt 5 dt dt ). 
dus 1 duo dug 
if |we(se)| >A and |w3(s3)| >A set dt 5( dt dt ) 
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Meta Operator 5 Succeeds 


Succeeds with same noise pulses 72, 73. (Meta operator 2 fails.) 


Noise pulses attack up and uy, respectively. 


1.0 
0.5 
3 U2 0.0 
2 
ns(t) “a 
a 1 + u(17.8) 
12 ~ 
0 ) u(24) 
8 16 24 8 16 24 -1.7 -1.0 0.0 1.0 
t t U1 
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Hardware Gedankexperiment 


Tests feasibility of building meta operator 2. 


C, and C are D flip-flop circuits. S is a self-modifiable circuit. 


Dt) » Qilt) 
ax] Ch 
[>—D a 
Ss 
aM LO 11) 
CLK C4 
1 > 
: : dw, _ du3 duy dw _ dug dup 
Circuit S computes “4 = %; a: at = &e —* 


if |w1(si)| > A1 or |we(s2)| > 02 circuit S self-modifies circuit Cy. 
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Research Summary 


e A D flip-flop differential equations model was used. 


A noise attack can disrupt a flip-flop orbit. 
e Analogous to error codes, additional (healing) variables, meta 
variables, meta operators and self-modifiable differential 


equations can help ameliorate a noise attack. 


e Signal functionality and healing should be decentralized over 
standard and meta variables. 


e Outlined a hardware design: tests meta operator 2’s feasibility. 
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Research Questions 


e Can a hardware flip-flop self-modify to hinder noise attacks? 


e Can a chaotic attractor decentralize signal and healing among 
multiple variables? 


e Can bifurcation theory provide insight on how to design new 
meta operators? 


e Can quantum entanglement help self-modify a quantum 
dynamical system? 
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